$ rpki-client -vvf rpki.apnic.net/member_repository/A914C10B/7B6CA122AF6211EB8BA1F714C4F9AE02/CNP7qN3CGMuzA5wDdh5qtwduT6I.mft File: CNP7qN3CGMuzA5wDdh5qtwduT6I.mft (raw, json) Hash identifier: dzQTMTi71+p6tRHI8TaUMKxZT+6StkrHIZU+yPO49OQ= Subject key identifier: 75:64:9A:28:37:09:D7:A9:BF:FE:26:C8:8A:A1:40:D7:9A:AA:EB:7D Authority key identifier: 08:D3:FB:A8:DD:C2:18:CB:B3:03:9C:03:76:1E:6A:B7:07:6E:4F:A2 Certificate issuer: /CN=A914C10B/serialNumber=08D3FBA8DDC218CBB3039C03761E6AB7076E4FA2 Certificate serial: 0647 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNP7qN3CGMuzA5wDdh5qtwduT6I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C10B/7B6CA122AF6211EB8BA1F714C4F9AE02/CNP7qN3CGMuzA5wDdh5qtwduT6I.mft Manifest number: 0641 Signing time: Sun 02 Nov 2025 22:41:26 +0000 Manifest this update: Sun 02 Nov 2025 22:41:25 +0000 Manifest next update: Sun 09 Nov 2025 22:41:25 +0000 Files and hashes: 1: CNP7qN3CGMuzA5wDdh5qtwduT6I.crl (hash: Qgjg/nC+FJfzpQ7PlPViNXv7LLzwL5jv+RTrYg+lD0c=) 2: CA16E952AF6411EB95CDDD18C4F9AE02.roa (hash: 2zuRRC9X9QGiy5zsxYozQv/RNV6iHA3e11RJdVWl2NQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C10B/7B6CA122AF6211EB8BA1F714C4F9AE02/CNP7qN3CGMuzA5wDdh5qtwduT6I.crl rsync://rpki.apnic.net/member_repository/A914C10B/7B6CA122AF6211EB8BA1F714C4F9AE02/CNP7qN3CGMuzA5wDdh5qtwduT6I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNP7qN3CGMuzA5wDdh5qtwduT6I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 22:41:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1607 (0x647) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C10B, serialNumber=08D3FBA8DDC218CBB3039C03761E6AB7076E4FA2 Validity Not Before: Nov 2 22:41:25 2025 GMT Not After : Nov 9 22:41:25 2025 GMT Subject: CN=6907de15-b6fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:f8:c1:14:d5:05:90:ae:75:ec:46:e1:f0:a9: 4a:a2:fd:9e:f2:7c:af:cc:d0:0d:54:00:74:5b:88: d5:eb:c1:6b:76:69:c4:93:d4:a9:53:18:36:fe:7e: d9:a4:73:40:f7:ef:15:9d:1d:31:52:68:4a:a5:0c: 65:d1:21:f5:3e:88:b4:66:33:0d:46:d9:10:35:cf: 1e:60:6b:3d:92:9c:a3:b4:ed:61:8b:ea:57:b0:f2: 99:24:72:96:4a:22:75:dc:60:22:3e:a0:de:d0:8d: f9:2c:cc:9e:5f:fd:88:2b:8b:9e:bf:ba:a5:ef:b2: 29:ef:45:f1:f0:fd:42:c7:94:0f:59:ff:11:81:3f: 5a:f4:7c:8d:17:03:b3:74:44:d7:32:9d:be:36:df: f1:ce:04:16:78:aa:a0:ba:e6:11:97:03:da:cf:b9: d0:32:fa:62:93:99:17:5c:df:10:6e:15:44:ab:e3: bb:ea:76:5a:96:56:bc:e7:89:dd:55:0c:bb:b1:a1: 2e:0b:c6:b2:a4:68:a9:55:c4:32:1a:b1:b7:1b:7d: 94:d3:2a:4f:c1:e4:a8:0f:1c:23:47:31:ba:9b:86: 5c:e8:30:65:5e:84:fe:46:cc:22:39:8e:b5:01:e0: 22:28:e4:4b:2a:69:31:46:fd:3c:65:f8:16:4e:43: 81:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:64:9A:28:37:09:D7:A9:BF:FE:26:C8:8A:A1:40:D7:9A:AA:EB:7D X509v3 Authority Key Identifier: keyid:08:D3:FB:A8:DD:C2:18:CB:B3:03:9C:03:76:1E:6A:B7:07:6E:4F:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C10B/7B6CA122AF6211EB8BA1F714C4F9AE02/CNP7qN3CGMuzA5wDdh5qtwduT6I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNP7qN3CGMuzA5wDdh5qtwduT6I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C10B/7B6CA122AF6211EB8BA1F714C4F9AE02/CNP7qN3CGMuzA5wDdh5qtwduT6I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:cf:ab:8a:fd:3f:6c:6c:b4:93:10:7c:80:22:e7:94:c6:89: 15:ff:f1:ec:eb:b0:0b:e8:fe:d0:c5:d9:72:08:8a:a1:45:42: 60:3d:c3:88:ce:49:49:be:70:03:76:5a:d2:b0:bf:e1:39:f1: 71:4b:06:32:64:2f:ca:4c:05:c8:6c:5d:73:a2:08:b5:7f:a7: 21:d5:a5:aa:f7:81:f1:dd:14:90:07:ca:49:d9:b3:c6:47:22: 8b:26:09:30:54:6e:ec:0b:26:56:98:8e:27:06:7e:d6:03:86: 11:90:73:89:ff:a6:1d:c7:00:0c:0f:b8:34:50:af:ca:6e:6a: 91:b8:b1:21:ae:64:09:c9:de:bc:3b:3e:c3:0b:bc:f1:55:e7: 6e:05:f5:4b:f5:82:c2:0d:87:64:4c:35:93:1c:a1:13:16:0c: 1a:39:15:06:6c:63:0d:6a:20:84:68:5f:90:49:31:92:ad:d1: 74:ae:34:1b:0b:89:19:41:11:9a:95:3d:1a:19:2a:57:2a:61: 6e:07:f7:68:d4:77:56:f4:80:b2:39:36:50:50:95:67:f7:18: 5a:33:e7:9d:27:ba:af:ad:ef:9f:5f:96:0e:42:ab:bd:b0:8a: 8a:2d:45:87:1c:95:e6:80:ac:2f:b6:e2:70:c7:99:70:8c:37: c8:9f:37:6e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBkcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEMxMEIxMTAvBgNVBAUTKDA4RDNGQkE4RERDMjE4Q0JCMzAzOUMwMzc2MUU2QUI3 MDc2RTRGQTIwHhcNMjUxMTAyMjI0MTI1WhcNMjUxMTA5MjI0MTI1WjAYMRYwFAYD VQQDEw02OTA3ZGUxNS1iNmZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx/jBFNUFkK517Ebh8KlKov2e8nyvzNANVAB0W4jV68FrdmnEk9SpUxg2/n7Z pHNA9+8VnR0xUmhKpQxl0SH1Poi0ZjMNRtkQNc8eYGs9kpyjtO1hi+pXsPKZJHKW SiJ13GAiPqDe0I35LMyeX/2IK4uev7ql77Ip70Xx8P1Cx5QPWf8RgT9a9HyNFwOz dETXMp2+Nt/xzgQWeKqguuYRlwPaz7nQMvpik5kXXN8QbhVEq+O76nZalla854nd VQy7saEuC8aypGipVcQyGrG3G32U0ypPweSoDxwjRzG6m4Zc6DBlXoT+RswiOY61 AeAiKORLKmkxRv08ZfgWTkOBuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHVkmig3 Cdepv/4myIqhQNeaqut9MB8GA1UdIwQYMBaAFAjT+6jdwhjLswOcA3YearcHbk+i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzEwQi83QjZDQTEyMkFG NjIxMUVCOEJBMUY3MTRDNEY5QUUwMi9DTlA3cU4zQ0dNdXpBNXdEZGg1cXR3ZHVU NkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NOUDdxTjNDR011ekE1d0RkaDVxdHdkdVQ2SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzEwQi83QjZDQTEyMkFGNjIxMUVCOEJBMUY3MTRDNEY5QUUwMi9DTlA3cU4zQ0dN dXpBNXdEZGg1cXR3ZHVUNkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBlz6uK/T9sbLSTEHyAIueUxokV//Hs67AL6P7QxdlyCIqhRUJgPcOI zklJvnADdlrSsL/hOfFxSwYyZC/KTAXIbF1zogi1f6ch1aWq94Hx3RSQB8pJ2bPG RyKLJgkwVG7sCyZWmI4nBn7WA4YRkHOJ/6YdxwAMD7g0UK/KbmqRuLEhrmQJyd68 Oz7DC7zxVeduBfVL9YLCDYdkTDWTHKETFgwaORUGbGMNaiCEaF+QSTGSrdF0rjQb C4kZQRGalT0aGSpXKmFuB/do1HdW9ICyOTZQUJVn9xhaM+edJ7qvre+fX5YOQqu9 sIqKLUWHHJXmgKwvtuJwx5lwjDfInzdu -----END CERTIFICATE-----Generated at Mon Nov 3 18:08:07 2025 by rpki-client